Southwest Healthcare Services Announces Data Breach Affecting Patients’ SSNs and PHI

Console and Associates, P.C.
Contact

On March 31, 2023, Southwest Healthcare Services (“Southwest”) filed a notice of data breach with the Montana Attorney General after the organization learned that an unauthorized party was able to access confidential patient information stored on its computer system. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, dates of birth, addresses, Social Security numbers, driver’s license numbers, health insurance information and protected health information. After confirming that consumer data was leaked, Southwest began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.

If you are a current or former patient at Southwest Healthcare Services Hospital, it is essential you understand what is at risk and what you can do about it. As we’ve previously reported, healthcare facilities are becoming the preferred target of many hackers due to the vast amount of sensitive information in their possession. Because of this, hackers can often obtain everything they need to commit identity theft and other frauds after a healthcare data breach, especially those involving larger hospitals and healthcare services organizations. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Southwest Healthcare Services data breach, reach out to an experienced data breach lawyer for assistance.

What We Know So Far About the Southwest Healthcare Services Breach

News of the Southwest Healthcare Services data breach is still fresh; however, what we know at this point comes from the company’s filing with the Montana Attorney General, as well as a “Notice of Data Security Incident” posted on the Southwest website. According to this source, recently, Southwest learned that a bad actor may have obtained access to patients’ protected health information. While the company does not indicate how it learned of the intrusion, in response, Southwest conducted an investigation with the assistance of outside cybersecurity professionals in hopes of learning more about the incident and whether any patient data was jeopardized as a result.

On January 31, 2023, the Southwest investigation confirmed that the unauthorized actor was able to access certain files stored on the organization’s computer network between October 28, 2022 and October 29, 2023. Subsequently, Southwest learned that some of these files contained confidential patient information.

Upon discovering that sensitive consumer data was made available to an unauthorized party, Southwest Healthcare Services began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, date of birth, address, Social Security number, driver’s license number, health insurance information and protected health information.

On March 31, 2023, Southwest Healthcare Services sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About Southwest Healthcare Services

Southwest Healthcare Services is a non-profit healthcare services provider based in Bowman, North Dakota. Southwest Healthcare Services was created in 2001, with the consolidation of St. Luke’s Tri-State Hospital and Sunset Care Corporation. Subsequently, Bowman Ambulance Service became a part of Southwest Healthcare Services of Bowman in September 2002. The company also operates Sunrise Village Assisted Living, the Sunset Nursing Home and the Southwest Medical Clinic. Southwest Healthcare Services employs more than 138 people and generates approximately $27 million in annual revenue.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Console and Associates, P.C. | Attorney Advertising

Written by:

Console and Associates, P.C.
Contact
more
less

Console and Associates, P.C. on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide